Analysis
-
max time kernel
150s -
max time network
138s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
10-08-2023 14:27
Behavioral task
behavioral1
Sample
2023年全部热门单机游戏及汉化下载.url
Resource
win7-20230712-en
windows7-x64
Behavioral task
behavioral2
Sample
2023年全部热门单机游戏及汉化下载.url
Resource
win10v2004-20230703-en
windows10-2004-x64
Behavioral task
behavioral3
Sample
Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe
Resource
win7-20230712-en
windows7-x64
Behavioral task
behavioral4
Sample
Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe
Resource
win10v2004-20230703-en
windows10-2004-x64
Behavioral task
behavioral5
Sample
www.3dmgame.com.url
Resource
win7-20230712-en
windows7-x64
Behavioral task
behavioral6
Sample
www.3dmgame.com.url
Resource
win10v2004-20230703-en
windows10-2004-x64
General
-
Target
Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe
-
Size
1.7MB
-
MD5
fbc603ac06fd22574c2c3c5ffaf3a813
-
SHA1
decfc2253e25bb5e267c8fdeca986c21da55940c
-
SHA256
8ad7d3eeaf4b8271246719b0e548c3e261b00b5dd9bf66ae8f170f7caecbfe9a
-
SHA512
cba68c96edec52396bda0112ccc510d01c9c933a7af9d865872b98a5cf2d2954c3dc955ee2a5871cadec66ffd08a03cd106d08e172bd6db4314bf1544cac9126
-
SSDEEP
24576:Tr2BMB027PcmYfOcccMTJ4Gk9v34o7CnG3ICjB5nkTikoUPMMDSVXT5XbyFPPoya:Tr2yqP4o7uG37choUkhXT5Xoo1
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe Token: SeDebugPrivilege 1984 Baldurs Gate 3 v4.1.1 Plus 14 Trainer.exe